CVE

Id
17931  
CVE No.
CVE-2006-1827  
Status
Candidate  
Description
Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length.  
Phase
Assigned (20060418)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
152708 17931 CVE-2006-1827 MISC:http://www.cipher.org.uk/index.php?p=advisories/Asterisk_Codec_Integer_Overflow_07-04-2006.advisory  View
152709 17931 CVE-2006-1827 CONFIRM:http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.7-patch.gz  View
152710 17931 CVE-2006-1827 DEBIAN:DSA-1048  View
152711 17931 CVE-2006-1827 URL:http://www.debian.org/security/2006/dsa-1048  View
152712 17931 CVE-2006-1827 SUSE:SUSE-SR:2006:009  View
152713 17931 CVE-2006-1827 URL:http://www.novell.com/linux/security/advisories/2006_04_28.html  View
152714 17931 CVE-2006-1827 BID:17561  View
152715 17931 CVE-2006-1827 URL:http://www.securityfocus.com/bid/17561  View
152716 17931 CVE-2006-1827 VUPEN:ADV-2006-1478  View
152717 17931 CVE-2006-1827 URL:http://www.vupen.com/english/advisories/2006/1478  View
152718 17931 CVE-2006-1827 SECUNIA:19800  View
152719 17931 CVE-2006-1827 URL:http://secunia.com/advisories/19800  View
152720 17931 CVE-2006-1827 SECUNIA:19872  View
152721 17931 CVE-2006-1827 URL:http://secunia.com/advisories/19872  View
152722 17931 CVE-2006-1827 SECUNIA:19897  View

Related JVN